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e Fault Management Software 
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Requirements and Design Phase 


Other Factors 


Rich graphical constructs 


Deterministic 


Ge» Standards 
Previous NASA Stateflow © Applications 
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= Ares - Orion Command Abort 
= NESC - Toyota, Commercial Crew Program 
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State Flow Environment 
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Simple State Machine 
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Hybrid SysML - UML 
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{function determine_if_failed_high_reg_is_only_remainng_source 


(funetracidetermine_t_falled_high_reg_is_only remaining_source|=true}) 


(reaionarosientinesoctatie=t) function deenergize_Ihe_valve_suppying_over pressure 
{redundaney_counter_for_valve—~ 
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Stateflow 


function set_above_imil_event 
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Script Driven — Ground Operations Timeline — 


Nominal Sequence Generator — Fault Generator ao” 
» Rule Checker — Analysis Report Generator — Env. 


Timeline & State Report scripts —- SAM Test Repo 
e User GUI 
« Test Cases: Nominal, Off-Nominal, VMET, MCaRT, SIL 
* TRAC Trouble Ticket System Summaries 
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User GUI 


M&FM EVENTS 


RULE VIOLATION: 


HalNo Halt 


LAUNCH HALT 
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Findings: VMET & SAM 


MPS 


MCaRT & SIL 
19% of MCaRT entries tested 
85.5% passed 


45% of SIL test cases executed 
27% passed 


Finding Types 

Logic Interpretation 30% 
Editorials 55% 
Logic Update 15% 
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« Interactive Failures 

« Prelaunch procedures —-- OMRs — LCCs — Rule Checker 

« Hazardous State Identification 

« Post Flight Analysis 

« Other: EUS, crew habitat, payloads, proximity ops, rovers, 
robotic deep space missions, EDL ops 

« MBE — M&FM Algorithms — FSW — Testing 

* Challenges 

* Questions 


